Differences between escape vs encodeURIComponent

This vector shows the differences between escape and encodeURIComponent

Shazzer Elite

Created Oct 15, 2024

Updated May 27, 2025

Detecting browser...

CategoryXSS Execution

VisibilityPublic

TypeJS

CharsetUTF-8

Template used:

let chr = String.fromCodePoint($[i]);0x0D
escape(chr) !== encodeURIComponent(chr) && log($[i])

Sample payloads

let chr = String.fromCodePoint(33);0x0D
escape(chr) !== encodeURIComponent(chr) && alert(33)

let chr = String.fromCodePoint(43);0x0D
escape(chr) !== encodeURIComponent(chr) && alert(43)

let chr = String.fromCodePoint(47);0x0D
escape(chr) !== encodeURIComponent(chr) && alert(47)

let chr = String.fromCodePoint(64);0x0D
escape(chr) !== encodeURIComponent(chr) && alert(64)

let chr = String.fromCodePoint(126);0x0D
escape(chr) !== encodeURIComponent(chr) && alert(126)